Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-13...er.exe

windows7-x64

9

2024-05-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-13_d4704a6152c8daa55087ed17c1c7e98d_cryptolocker

  • Size

    67KB

  • Sample

    240513-r3s2jabe65

  • MD5

    d4704a6152c8daa55087ed17c1c7e98d

  • SHA1

    134130e117f874dc7f1fc5a868b77362ae85fabd

  • SHA256

    4ea69b9b7e115c7210b079732d2e3f1adca50a275c540e963b1e63fec3064bed

  • SHA512

    ad437bbbadead38eed7afdcd7360614147437cd9f7d9b3610b93aa5df1d7120b9682e18e64d58a0873b9a6f6266b25ce7ba3e74d35e96a1a896d2c349140d5aa

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI4:6j+1NMOtEvwDpjr8ox8UDEpN/jV

Score
10/10

Malware Config

Targets

    • Target

      2024-05-13_d4704a6152c8daa55087ed17c1c7e98d_cryptolocker

    • Size

      67KB

    • MD5

      d4704a6152c8daa55087ed17c1c7e98d

    • SHA1

      134130e117f874dc7f1fc5a868b77362ae85fabd

    • SHA256

      4ea69b9b7e115c7210b079732d2e3f1adca50a275c540e963b1e63fec3064bed

    • SHA512

      ad437bbbadead38eed7afdcd7360614147437cd9f7d9b3610b93aa5df1d7120b9682e18e64d58a0873b9a6f6266b25ce7ba3e74d35e96a1a896d2c349140d5aa

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI4:6j+1NMOtEvwDpjr8ox8UDEpN/jV

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks